Ubuntu: Security Advisory (USN-2964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2964-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2964-1 advisory. Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploi...

OracleVM 3.3 / 3.4 : foomatic (OVMSA-2016-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : - Also consider back tick and semicolon as illegal shell escape characters. - CVE-2015-8327, CVE-2015-8560 - Prevent foomatic-rip overrun bug 1214534. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2015-2964

CVE-2015-2964 affects namshi/jose (PHP JWT library). A vulnerability in processing JWT headers allows bypass of signature verification, enabling specially crafted tokens to be treated as valid data. Public sources indicate the library did not properly enforce signature checks (e.g., issues with t...

Attackers able to impersonate users

There was a problem hiding this comment. Choose a reason for hiding this comment The reason will be displayed to describe this comment to others. Learn more. Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Hide comment For reference, this issue has been assigned ID CVE-2015-2964...

Attackers able to impersonate users

Merge branch 'disabling-none-by-default'...

Oracle Solaris Third-Party Patch Update : foomatic (multiple_vulnerabilities_in_foomatic)

The remote Solaris system is missing necessary patches to address security updates : - foomatic-rip-hplip in HP Linux Imaging and Printing HPLIP 3.11.5 allows remote attackers to execute arbitrary code via a crafted FoomaticRIPCommandLine field in a .ppd file. CVE-2011-2697 - foomaticrip.c in...

CVE-2014-2964

Cobham Aviator 700D/700E satellite terminals expose hardcoded credentials for the maintenance commands (debug, prod, do160, flrp). A local attacker with physical access or maintenance-port connectivity can authenticate via a serial line and potentially gain full control of the terminal. ROOT caus...

Cobham Aviator satellite terminals contain multiple vulnerabilities

Overview Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities. Description Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:CWE-327:Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 Please note that th...

openSUSE Security Update : foomatic-filters (openSUSE-SU-2011:0892-1)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2964: CVSS v2 Base Score: 6.8 moderate AV:N/AC:M/Au:N/C:P/I:P/A:P: Code...

openSUSE Security Update : foomatic-filters (openSUSE-SU-2011:0892-1)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2964: CVSS v2 Base Score: 6.8 moderate AV:N/AC:M/Au:N/C:P/I:P/A:P: Code...

CVE-2013-2964

CVE-2013-2964 describes a local buffer overflow in the IBM Tivoli Storage Manager (TSM) client component dsmtca on UNIX/Linux, affecting versions 5.5.4.0, 6.1.0–6.1.5.4, 6.2.0–6.2.4.7, and 6.3.0–6.3.0.17. The vulnerability enables local users to gain privileges via unspecified vectors (local priv...

CVE-2013-2964

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

Scientific Linux Security Update : squirrelmail on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2964 squirrelmail: CSRF issues in all forms Form submissions in SquirrelMail did not implement protection against Cross-Site Request Forgery CSRF attacks. If a remote attacker tricked a user into visiting a malicious web page, the attacker could hijack that user's authentication, inject...

Scientific Linux Security Update : foomatic on SL6.x i386/x86_64

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. foomatic-rip is a print filter written in C. An...

RedHat Update for foomatic RHSA-2011:1110-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian: Security Advisory (DSA-2380-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2380-1 : foomatic-filters - shell command injection

It was discovered that the foomatic-filters, a support package for setting up printers, allowed authenticated users to submit crafted print jobs which would execute shell commands on the print servers. CVE-2011-2697 was assigned to the vulnerability in the Perl implementation included in lenny, a...

[SECURITY] [DSA 2380-1] foomatic-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2380-1 [email protected] http://www.debian.org/security/ Florian Weimer January 04, 2012 http://www.debian.org/security/faq -...

SuSE 10 Security Update : foomatic-filters (ZYPP Patch Number 7677)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2697: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P: Input Validation...